Resolved! C1111 + APIC-EM PnP issue
So I had a working solution where I could deploy new DMVPN routers (C1111) using our APIC EM instance over the internet, using cloud redirect, where both a cert is deployed, IOS is upgraded and config is deployed.Now I've found that this stopped work...